How Flash Loan Attacks Break DeFi Protocols and What You Can Do About It

Flash loan attacks aren’t science fiction. They’re happening right now - and they’re getting smarter. In March 2025, a single transaction drained $7 million from KiloEx. A year earlier, an attacker stole $182 million from Beanstalk Farms using nothing but a borrowed loan that had to be paid back before the block finished mining. No bank accounts. No passwords. Just code. And it worked.

What Exactly Is a Flash Loan?

A flash loan is a type of unsecured loan in DeFi that lets you borrow any amount of cryptocurrency - say, $10 million in ETH or USDC - without putting up collateral. The catch? You have to repay it, plus a small fee, within the same blockchain transaction. If you don’t, the whole thing cancels out like it never happened.

This isn’t magic. It’s enforced by smart contracts. The protocol checks: Did you return the money? If yes, great. If no, the entire transaction rolls back. No trace. No partial loss. Just a clean reset.

At first, flash loans were used for legitimate purposes: arbitrage between exchanges, collateral swaps, or refinancing positions. But attackers quickly realized: if you can move millions in one block, you can break price feeds.

How Flash Loan Attacks Work

Here’s the step-by-step playbook:

1. Borrow: Attackers take out a huge flash loan - often $100M or more - from AAVE, dYdX, or another flash loan-enabled protocol.
2. Manipulate: They use that money to buy up a small token on a decentralized exchange (DEX), like Uniswap or PancakeSwap. By flooding the pool with tokens, they artificially inflate the price.
3. Exploit: The inflated price is fed into another DeFi protocol - say, a lending platform that uses that DEX as its only price oracle. The attacker now appears to have massively valuable collateral. They borrow far more than they should be allowed to.
4. Repay and Run: They use the borrowed funds to repay the original flash loan. The transaction closes. The price snaps back. The attacker walks away with millions in profit. The protocol? Left holding worthless debt.

The whole thing takes less than 15 seconds. And because it’s one atomic transaction, there’s no time to react. No alerts. No freeze. Just a silent theft.

Real-World Attacks That Shook DeFi

The Beanstalk Farms attack in April 2022 was a masterclass in exploiting governance, not just price. The attacker borrowed $1 billion, used it to buy up governance tokens, and voted to drain the protocol’s entire treasury. $182 million vanished. No hack. Just a vote - made possible by a flash loan.

PancakeBunny’s 2021 attack followed a similar pattern. Attackers manipulated the price of BUNNY tokens in a liquidity pool, used the fake value as collateral to borrow more tokens, then dumped them on the market. The token crashed 90% in minutes. $200 million lost.

And it’s not slowing down. In April 2025 alone, flash loan attacks contributed to $92 million in losses across 15 separate incidents. That’s up 124% from March. Total DeFi losses in 2025 have already hit $1.7 billion - more than all of 2024.

Why Are These Attacks So Effective?

Three reasons:

• No collateral needed: You don’t need to own anything to launch an attack. Just gas fees and a basic understanding of smart contracts.
• One-block speed: Detection systems can’t react fast enough. By the time a monitor flags something, the transaction is already confirmed.
• Oracle dependency: Most DeFi protocols rely on price feeds from just one or two DEXs. If you can manipulate those, you control the entire system.

Amberdata and other blockchain security firms point out: 70% of flash loan attacks in 2024-2025 involved price oracle manipulation. That’s not a bug. It’s a design flaw.

How Protocols Are Fighting Back

Some teams are learning. Here’s what’s working:

• Time-Weighted Average Price (TWAP): Instead of using the current price, protocols now calculate the average price over 5, 10, or 60 minutes. A sudden spike won’t fool the system.
• Multi-oracle systems: Leading protocols like Aave v3 and Compound now pull price data from 5-7 different sources - Chainlink, DEX aggregators, on-chain feeds - and use median values. No single point of failure.
• Circuit breakers: Some protocols now pause trading if a token’s price moves more than 15% in a single block. It’s not perfect, but it stops the biggest exploits.
• Reentrancy guards: Code audits now routinely check for reentrancy bugs - where a malicious contract calls back into the protocol during a transaction. The checks-effects-interactions pattern is now standard.

Projects like Synthetix and Yearn Finance have reduced their exposure by 80% since 2023 just by switching to TWAP and multi-oracle setups.

What You Should Do as a User

If you’re providing liquidity or using DeFi protocols, here’s your action plan:

• Avoid protocols with single-price oracles. If a lending platform uses only Uniswap for pricing, walk away.
• Check if they use TWAP. Look for mentions of “time-weighted average” in their docs or GitHub. If it’s not there, assume they’re vulnerable.
• Don’t over-leverage. Even if a protocol says you can borrow 90% of your collateral, that’s a red flag. Real security means conservative limits.
• Use insurance. Protocols like Nexus Mutual and Cover Protocol now offer flash loan attack coverage. It’s not cheap, but it’s better than losing everything.

The Bigger Picture

Flash loan attacks aren’t going away. They’re becoming more targeted, more complex, and more profitable. We’re seeing attackers combine flash loans with MEV bots, frontrunning, and cross-protocol exploits. What used to be a $5M exploit now often involves multiple chains and 3-4 different DeFi protocols.

But there’s hope. The community is responding. Code audits are becoming mandatory before launch. Oracle decentralization is now a baseline expectation. And more protocols are publishing real-time attack detection dashboards - letting users see when suspicious activity is flagged.

The lesson? DeFi isn’t broken. But it’s fragile. And if you treat it like a bank, you’ll get burned. Treat it like code - because that’s what it is.

Frequently Asked Questions